gitlab vulnerabilities (Bitnami)
1,195 vulnerabilities.
gitlabBitnamiA path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token8.5 HighgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an...2.4 LowgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a...5.9 MediumgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an...3.5 LowgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing...4.3 MediumgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A...9.6 CriticalgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting with 13.7.9. A...7.5 HighgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was...6.3 MediumgitlabBitnamiPotential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which...4.3 MediumgitlabBitnamiAn information disclosure issue in GitLab starting from version 12.8 allowed a user with access...6.2 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access...4.3 MediumgitlabBitnamiIn all versions of GitLab starting from 13.7, marshalled session keys were being stored in Redis.5.7 MediumgitlabBitnamiImproper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data...4.3 MediumgitlabBitnamiAn issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error...4.3 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was...5.0 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a...3.5 LowgitlabBitnamiA vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF...5.4 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper...4.3 MediumgitlabBitnamiAn authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify...4.9 MediumgitlabBitnamiInsufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to...5.4 MediumgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing...9.9 CriticalgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was...4.1 MediumgitlabBitnamiStarting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to...5.9 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was...3.5 LowgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential...5.3 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 12.6.7. A...4.3 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used...4.3 MediumgitlabBitnamiAn attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request...5.3 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect...5.3 MediumgitlabBitnamiInsufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an...7.3 HighgitlabBitnamiA regular expression denial of service issue has been discovered in NuGet API affecting all...4.3 MediumgitlabBitnamiA potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13...4.3 MediumgitlabBitnamiA limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >...5.3 MediumgitlabBitnamiAn issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >=...4.3 MediumgitlabBitnamiRemoved group members were able to use the To-Do functionality to retrieve updated information on...3.1 LowgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13...5.3 MediumgitlabBitnamiInformation disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and...5.3 MediumgitlabBitnamiInformation disclosure in Advanced Search component of GitLab EE starting from 8.4 results in...4.0 MediumgitlabBitnamiInformation about the starred projects for private user profiles was exposed via the GraphQL API...4.3 MediumgitlabBitnamiA DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that...4.3 MediumgitlabBitnamiA XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6...5.5 MediumgitlabBitnamiThe Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete...7.6 HighgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A...8.2 HighgitlabBitnamiAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path...7.5 HighgitlabBitnamiPath traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8...7.1 HighgitlabBitnamiAn issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular...4.3 MediumgitlabBitnamiAn issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required...5.7 MediumgitlabBitnamiCSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able...3.1 LowgitlabBitnamiInsufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker...6.5 MediumgitlabBitnamiA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The...4.3 Medium- Show moreLoading…